{"id":42825,"date":"2019-07-16T11:16:52","date_gmt":"2019-07-16T09:16:52","guid":{"rendered":"https:\/\/mamchenkov.net\/wordpress\/?p=42825"},"modified":"2019-07-16T11:16:56","modified_gmt":"2019-07-16T09:16:56","slug":"interpretation-of-ntfs-timestamps","status":"publish","type":"post","link":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/","title":{"rendered":"Interpretation of NTFS Timestamps"},"content":{"rendered":"<!-- google_ad_section_start -->\n\n<p class=\"wp-block-paragraph\">&#8220;<a href=\"https:\/\/articles.forensicfocus.com\/2013\/04\/06\/interpretation-of-ntfs-timestamps\/\">Interpretation of NTFS Timestamps<\/a>&#8221; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps.  Let me just leave you with this quote:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a\u00a0 \u201c64-bit value representing the number of 100-nanosecond intervals since January 1, 1601 (UTC)\u201d.<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">WTF?<\/p>\n<!-- google_ad_section_end -->\n","protected":false},"excerpt":{"rendered":"<!-- google_ad_section_start -->\n<p>&#8220;Interpretation of NTFS Timestamps&#8221; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a\u00a0 \u201c64-bit value representing the number &hellip; <a href=\"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Interpretation of NTFS Timestamps<\/span><\/a><\/p>\n<!-- google_ad_section_end -->\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"Interpretation of NTFS Timestamps #SysAdmin #DevOps #NTFS #Windows #filesystems #history #WTF","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false,"_links_to":"","_links_to_target":""},"categories":[1,133,62],"tags":[616,286,2077,3266],"keyring_services":[],"class_list":["post-42825","post","type-post","status-publish","format-standard","hentry","category-general","category-sysadmin","category-technology","tag-filesystem","tag-history","tag-microsoft-windows","tag-wtf"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.8 - aioseo.com -->\n\t<meta name=\"description\" content=\"&quot;Interpretation of NTFS Timestamps&quot; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Leonid Mamchenkov\"\/>\n\t<meta name=\"google-site-verification\" content=\"VHvdD0_usx1_4DzKy_QCVcICVgX2EgA2ybELT-wl7kQ\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.8\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Leonid Mamchenkov - Life, universe, and everything else\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Interpretation of NTFS Timestamps - Leonid Mamchenkov\" \/>\n\t\t<meta property=\"og:description\" content=\"&quot;Interpretation of NTFS Timestamps&quot; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2026\/03\/leonid-sailing-beer.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2026\/03\/leonid-sailing-beer.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t\t<meta property=\"og:image:height\" content=\"1024\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-07-16T09:16:52+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-07-16T09:16:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/MamchenkovBlog\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@mamchenkov\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Interpretation of NTFS Timestamps - Leonid Mamchenkov\" \/>\n\t\t<meta name=\"twitter:description\" content=\"&quot;Interpretation of NTFS Timestamps&quot; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@mamchenkov\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2026\/03\/leonid-sailing-beer.jpg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#blogposting\",\"name\":\"Interpretation of NTFS Timestamps - Leonid Mamchenkov\",\"headline\":\"Interpretation of NTFS Timestamps\",\"author\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/author\\\/leonid\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/#person\"},\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#articleImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3cf6df002a284d78fb6e9d8222ca4d102e0832035ed6bc8447008bd234e131a4?s=96&d=identicon&r=g\",\"width\":96,\"height\":96,\"caption\":\"Leonid Mamchenkov\"},\"datePublished\":\"2019-07-16T11:16:52+02:00\",\"dateModified\":\"2019-07-16T11:16:56+02:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#webpage\"},\"articleSection\":\"All, Sysadmin, Technology, filesystem, history, Microsoft Windows, WTF\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/#listItem\",\"name\":\"Technology\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/#listItem\",\"position\":2,\"name\":\"Technology\",\"item\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/sysadmin\\\/#listItem\",\"name\":\"Sysadmin\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/sysadmin\\\/#listItem\",\"position\":3,\"name\":\"Sysadmin\",\"item\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/sysadmin\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#listItem\",\"name\":\"Interpretation of NTFS Timestamps\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/#listItem\",\"name\":\"Technology\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#listItem\",\"position\":4,\"name\":\"Interpretation of NTFS Timestamps\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/category\\\/technology\\\/sysadmin\\\/#listItem\",\"name\":\"Sysadmin\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/#person\",\"name\":\"Leonid Mamchenkov\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#personImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3cf6df002a284d78fb6e9d8222ca4d102e0832035ed6bc8447008bd234e131a4?s=96&d=identicon&r=g\",\"width\":96,\"height\":96,\"caption\":\"Leonid Mamchenkov\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/author\\\/leonid\\\/#author\",\"url\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/author\\\/leonid\\\/\",\"name\":\"Leonid Mamchenkov\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3cf6df002a284d78fb6e9d8222ca4d102e0832035ed6bc8447008bd234e131a4?s=96&d=identicon&r=g\",\"width\":96,\"height\":96,\"caption\":\"Leonid Mamchenkov\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#webpage\",\"url\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/\",\"name\":\"Interpretation of NTFS Timestamps - Leonid Mamchenkov\",\"description\":\"\\\"Interpretation of NTFS Timestamps\\\" is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \\u2018FILETIME\\u2019 data structure in the Windows Software Development Toolkit, is a \\u201c64-bit value representing the number\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/2019\\\/07\\\/16\\\/interpretation-of-ntfs-timestamps\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/author\\\/leonid\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/author\\\/leonid\\\/#author\"},\"datePublished\":\"2019-07-16T11:16:52+02:00\",\"dateModified\":\"2019-07-16T11:16:56+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/#website\",\"url\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/\",\"name\":\"Blog of Leonid Mamchenkov\",\"description\":\"Life, universe, and everything else\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/mamchenkov.net\\\/wordpress\\\/#person\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Interpretation of NTFS Timestamps - Leonid Mamchenkov","description":"\"Interpretation of NTFS Timestamps\" is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number","canonical_url":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"VHvdD0_usx1_4DzKy_QCVcICVgX2EgA2ybELT-wl7kQ","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#blogposting","name":"Interpretation of NTFS Timestamps - Leonid Mamchenkov","headline":"Interpretation of NTFS Timestamps","author":{"@id":"https:\/\/mamchenkov.net\/wordpress\/author\/leonid\/#author"},"publisher":{"@id":"https:\/\/mamchenkov.net\/wordpress\/#person"},"image":{"@type":"ImageObject","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#articleImage","url":"https:\/\/secure.gravatar.com\/avatar\/3cf6df002a284d78fb6e9d8222ca4d102e0832035ed6bc8447008bd234e131a4?s=96&d=identicon&r=g","width":96,"height":96,"caption":"Leonid Mamchenkov"},"datePublished":"2019-07-16T11:16:52+02:00","dateModified":"2019-07-16T11:16:56+02:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#webpage"},"isPartOf":{"@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#webpage"},"articleSection":"All, Sysadmin, Technology, filesystem, history, Microsoft Windows, WTF"},{"@type":"BreadcrumbList","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress#listItem","position":1,"name":"Home","item":"https:\/\/mamchenkov.net\/wordpress","nextItem":{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/#listItem","name":"Technology"}},{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/#listItem","position":2,"name":"Technology","item":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/","nextItem":{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/sysadmin\/#listItem","name":"Sysadmin"},"previousItem":{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/sysadmin\/#listItem","position":3,"name":"Sysadmin","item":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/sysadmin\/","nextItem":{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#listItem","name":"Interpretation of NTFS Timestamps"},"previousItem":{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/#listItem","name":"Technology"}},{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#listItem","position":4,"name":"Interpretation of NTFS Timestamps","previousItem":{"@type":"ListItem","@id":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/sysadmin\/#listItem","name":"Sysadmin"}}]},{"@type":"Person","@id":"https:\/\/mamchenkov.net\/wordpress\/#person","name":"Leonid Mamchenkov","image":{"@type":"ImageObject","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#personImage","url":"https:\/\/secure.gravatar.com\/avatar\/3cf6df002a284d78fb6e9d8222ca4d102e0832035ed6bc8447008bd234e131a4?s=96&d=identicon&r=g","width":96,"height":96,"caption":"Leonid Mamchenkov"}},{"@type":"Person","@id":"https:\/\/mamchenkov.net\/wordpress\/author\/leonid\/#author","url":"https:\/\/mamchenkov.net\/wordpress\/author\/leonid\/","name":"Leonid Mamchenkov","image":{"@type":"ImageObject","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/3cf6df002a284d78fb6e9d8222ca4d102e0832035ed6bc8447008bd234e131a4?s=96&d=identicon&r=g","width":96,"height":96,"caption":"Leonid Mamchenkov"}},{"@type":"WebPage","@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#webpage","url":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/","name":"Interpretation of NTFS Timestamps - Leonid Mamchenkov","description":"\"Interpretation of NTFS Timestamps\" is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/mamchenkov.net\/wordpress\/#website"},"breadcrumb":{"@id":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/#breadcrumblist"},"author":{"@id":"https:\/\/mamchenkov.net\/wordpress\/author\/leonid\/#author"},"creator":{"@id":"https:\/\/mamchenkov.net\/wordpress\/author\/leonid\/#author"},"datePublished":"2019-07-16T11:16:52+02:00","dateModified":"2019-07-16T11:16:56+02:00"},{"@type":"WebSite","@id":"https:\/\/mamchenkov.net\/wordpress\/#website","url":"https:\/\/mamchenkov.net\/wordpress\/","name":"Blog of Leonid Mamchenkov","description":"Life, universe, and everything else","inLanguage":"en-US","publisher":{"@id":"https:\/\/mamchenkov.net\/wordpress\/#person"}}]},"og:locale":"en_US","og:site_name":"Leonid Mamchenkov - Life, universe, and everything else","og:type":"article","og:title":"Interpretation of NTFS Timestamps - Leonid Mamchenkov","og:description":"&quot;Interpretation of NTFS Timestamps&quot; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number","og:url":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/","og:image":"https:\/\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2026\/03\/leonid-sailing-beer.jpg","og:image:secure_url":"https:\/\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2026\/03\/leonid-sailing-beer.jpg","og:image:width":1024,"og:image:height":1024,"article:published_time":"2019-07-16T09:16:52+00:00","article:modified_time":"2019-07-16T09:16:56+00:00","article:publisher":"https:\/\/www.facebook.com\/MamchenkovBlog","twitter:card":"summary_large_image","twitter:site":"@mamchenkov","twitter:title":"Interpretation of NTFS Timestamps - Leonid Mamchenkov","twitter:description":"&quot;Interpretation of NTFS Timestamps&quot; is a fascinating technical dive into the NTFS filesystem and the way it stores file and directory timestamps. Let me just leave you with this quote: NTFS file timestamps, according to the documentation of the \u2018FILETIME\u2019 data structure in the Windows Software Development Toolkit, is a \u201c64-bit value representing the number","twitter:creator":"@mamchenkov","twitter:image":"https:\/\/mamchenkov.net\/wordpress\/wp-content\/uploads\/2026\/03\/leonid-sailing-beer.jpg"},"aioseo_meta_data":{"post_id":"42825","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2023-07-19 16:58:33","updated":"2026-01-15 14:15:45","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/mamchenkov.net\/wordpress\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/\" title=\"Technology\">Technology<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/sysadmin\/\" title=\"Sysadmin\">Sysadmin<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tInterpretation of NTFS Timestamps\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/mamchenkov.net\/wordpress"},{"label":"Technology","link":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/"},{"label":"Sysadmin","link":"https:\/\/mamchenkov.net\/wordpress\/category\/technology\/sysadmin\/"},{"label":"Interpretation of NTFS Timestamps","link":"https:\/\/mamchenkov.net\/wordpress\/2019\/07\/16\/interpretation-of-ntfs-timestamps\/"}],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":7921,"url":"https:\/\/mamchenkov.net\/wordpress\/2004\/09\/18\/tagging-photos-with-gps-coordinates\/","url_meta":{"origin":42825,"position":0},"title":"Tagging Photos With GPS Coordinates","author":"Leonid Mamchenkov","date":"September 18, 2004","format":false,"excerpt":"There is an interesting discussion over at Slashdot about tagging digital photos with GPS coordinates. Apparently, I am not the most lazy person in my wishes. I just wanted to have a GPS unit, so that I could save coordinates at places where I make pictures. Real geeks, on the\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":22186,"url":"https:\/\/mamchenkov.net\/wordpress\/2014\/07\/13\/pifs-data-free-filesystem\/","url_meta":{"origin":42825,"position":1},"title":"\u03c0fs &#8211; the data-free filesystem!","author":"Leonid Mamchenkov","date":"July 13, 2014","format":"link","excerpt":"\u03c0fs - the data-free filesystem! \u03c0fs is a revolutionary new file system that, instead of wasting space storing your data on your hard drive, stores your data in \u03c0! You'll never run out of space again - \u03c0 holds every file that could possibly exist! They said 100% compression was\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":17655,"url":"https:\/\/mamchenkov.net\/wordpress\/2013\/01\/09\/git-separating-folder-into-different-repository-with-history\/","url_meta":{"origin":42825,"position":2},"title":"Git : separating folder into different repository, with history","author":"Leonid Mamchenkov","date":"January 9, 2013","format":false,"excerpt":"First things first. \u00a0If you don't use git for version control yet, stop right now and go plan your migration. \u00a0You'll thank me later. \u00a0Now. \u00a0A few days ago I had a tricky problem. \u00a0A chunk of code that was initially all over the project has been refactored into a\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":9615,"url":"https:\/\/mamchenkov.net\/wordpress\/2005\/10\/27\/daily-del-icio-us-bookmarks\/","url_meta":{"origin":42825,"position":3},"title":"Daily del.icio.us bookmarks","author":"Leonid Mamchenkov","date":"October 27, 2005","format":false,"excerpt":"Shared bookmarks for del.icio.us user tvset on 2005-10-26 GSig -- Graphical signature for Gmail users Tagged as: email gmail google html images logo mail signature tools Inverse Symbolic Calculator Tagged as: calculator calculus math mathematics science tools File Systems -- Good review of available file systems Tagged as: filesystem linux\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":9629,"url":"https:\/\/mamchenkov.net\/wordpress\/2005\/10\/31\/two-interviews-with-google\/","url_meta":{"origin":42825,"position":4},"title":"Two interviews with Google","author":"Leonid Mamchenkov","date":"October 31, 2005","format":false,"excerpt":"As I have already said, I had two interviews with Google. Both of the interviews were conducted over the phone (they called me both times). The first interview was with the recruiter and was mostly about my resume and possibilities of me moving to Dublin, Ireland. There was a small\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":9671,"url":"https:\/\/mamchenkov.net\/wordpress\/2005\/11\/15\/daily-del-icio-us-bookmarks\/","url_meta":{"origin":42825,"position":5},"title":"Daily del.icio.us bookmarks","author":"Leonid Mamchenkov","date":"November 15, 2005","format":false,"excerpt":"Shared bookmarks for del.icio.us user tvset on 2005-11-14 Light Field Photography with a Hand-Held Plenoptic Camera Tagged as: cool photography physics research science technology wow Trying to make sense of all the X modular packages Tagged as: desktop linux lists modules reference xorg Unison File Synchronizer -- Excellent tool to\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/42825","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/comments?post=42825"}],"version-history":[{"count":0,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/42825\/revisions"}],"wp:attachment":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/media?parent=42825"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/categories?post=42825"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/tags?post=42825"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/keyring_services?post=42825"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}